Version 1.2.0.4 no password saving with SecureVNCPlugin

[HeavyDad]

Hi

Since UltraVNC 1.2.0.3 password from SecureVNCPlugin is no longer saved. With version 1.1.9.6 everything works properly

Tested on Win 8.1_32bit and Win 7Pro SP1 32 bit with UltraVNC 1.2.0.3 and 1.2.0.4




setting password


and the result when I open it again


Is it possible that someone can help me?

I'm using version 1.1.9.6 now again.

Thanks
Mario

[Rudi De Vos]

In 1196 and older was a security leak that give admin access to guest users.
This was done by using the plugin save functions( winvnc running as service)

To avoid this the plugin is now started with the account of the desktop user, if we can imperonate the desktop user.
( using domain account, the local "system" account can NOT impersonate the desktopn user )

workarounds
------------------
1) Start winvnc.exe as application with a desktop user that have write permission to ultravnc.ini
net stop uvnc_service
start winvnc as app and save settings
net stop uvnc_service
2)Use the uvnc_settings.exe, this is a seperate ini editor.
Changes take effect after winvnc is restarted
3) Logon as local admin to make the changes ( to avoid any domain issue's)
winvnc can run as service.

[HeavyDad]

Hi,

Thanks for the quick information. I will test in the next few days.

Mario